Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: BSeKcN+JYsjgpeQafRMtoImTldTO2wYvvxo8Qg7flvc=
Subject key identifier: FF:21:84:53:CB:E4:BE:E2:0D:5C:2B:7D:C2:4A:B9:83:77:70:F4:32
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 019A4F99621201E96F1746AAA57F0A3D7CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0A04
Signing time: Tue 04 Nov 2025 16:00:43 +0000
Manifest this update: Tue 04 Nov 2025 16:00:43 +0000
Manifest next update: Wed 05 Nov 2025 16:00:43 +0000
Files and hashes: 1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=)
2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: tNyjsmXxlZhDn/fw7jgSNiztFjuSx28Qp0O4FPecEzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:62:12:01:e9:6f:17:46:aa:a5:7f:0a:3d:7c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Nov 4 16:00:43 2025 GMT
Not After : Nov 5 16:00:43 2025 GMT
Subject: CN=ff218453cbe4bee20d5c2b7dc24ab9837770f432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:7e:8d:80:c9:71:a7:44:4b:38:3c:b9:ac:
90:27:5d:6f:78:65:ef:26:b0:e1:88:b4:ce:60:25:
9e:be:32:fe:ee:8b:1a:9f:43:58:8d:62:bd:fe:46:
c8:30:87:70:b7:cd:e4:03:6b:0c:15:4c:8b:40:e6:
25:d4:35:93:9f:70:76:d1:03:6e:d6:2b:b8:8e:e9:
4e:79:a8:c8:b5:97:cd:de:42:1e:fa:a2:19:07:f9:
67:6d:be:e9:63:30:ff:98:13:e5:e1:94:45:e2:a6:
64:02:c2:73:15:46:db:8a:8a:a5:5b:a9:98:ab:bb:
5c:88:3d:e1:04:f4:9a:32:3b:9f:da:67:1a:02:54:
77:d5:58:12:d3:f7:6c:e8:f9:0a:e4:ac:eb:07:70:
1a:ef:0d:34:a8:0b:78:21:a0:61:e2:13:c3:8d:54:
ed:30:b4:29:fc:68:c3:35:1f:2e:89:65:70:dc:44:
ce:1c:49:39:0b:80:3e:13:a8:dc:c0:37:5a:d1:52:
12:ff:f5:2e:68:0d:51:0d:fe:0c:bd:e9:76:9e:a9:
3e:13:f0:ee:06:66:19:ba:24:a7:be:5f:ab:03:ed:
6d:5d:1d:30:6e:45:45:e8:d4:f7:e5:07:a4:34:78:
55:4d:2c:8e:ff:3b:e4:aa:63:b7:8f:a1:dc:f1:bc:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:21:84:53:CB:E4:BE:E2:0D:5C:2B:7D:C2:4A:B9:83:77:70:F4:32
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:14:0a:1e:46:52:46:6a:3f:f4:4d:60:96:54:df:ea:44:e8:
3e:fa:8c:0c:37:59:da:ed:5e:bf:5f:a6:c8:ad:32:04:75:c7:
3a:55:47:66:c7:07:26:0e:5c:ee:72:19:6c:e1:1e:4c:8d:57:
7d:e5:a1:59:bd:48:71:63:a8:5d:92:41:d5:8c:25:80:50:0d:
0d:e2:6c:9b:3c:2f:90:88:c0:62:02:14:c7:14:3c:17:35:2c:
bc:03:79:95:fb:28:c8:88:2b:44:a4:7f:aa:b1:3f:23:c0:c6:
db:c7:41:5e:a2:a9:89:94:1c:47:cf:bc:43:43:d0:1a:b7:f2:
a9:90:3c:70:08:72:76:04:52:f1:2d:2d:e7:5d:bd:75:1d:a6:
f5:3f:25:b7:92:fa:6a:88:3d:f6:4e:56:6d:31:f6:88:f5:ae:
bb:0c:75:92:24:94:90:27:40:51:05:45:b9:21:83:9c:54:84:
d8:9c:5b:82:fb:fa:11:2e:2c:73:ca:ba:b9:9b:8e:1d:6b:4a:
01:58:1b:c2:44:53:be:f7:64:1d:c6:cd:31:1a:61:97:32:68:
3f:35:8b:e8:27:2c:bf:64:22:c3:c4:48:9c:1b:ff:4f:ec:a5:
7d:69:58:bc:88:b0:85:13:bc:3e:63:db:6f:67:a7:56:51:da:
c3:5e:fb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:39 2025 by rpki-client